Jump to content

Jacktivity

Honorary Members
  • Posts

    360
  • Joined

  • Last visited

Posts posted by Jacktivity

  1. Hello, and welcome to Malwarebytes.org

    We don't work on malware removal in the general forums.

    Please print out, read and follow the directions here, skipping any steps you are unable to complete. Then post a NEW topic here.

    One of the expert helpers there will give you one-on-one assistance when one becomes available.

    After posting your new post make sure under options that you select Track this topic and choose one of the Email options so that you're alerted when someone has replied to your post.

    Alternatively, as a customer of the paid for product, you can contact the helpdesk at support@malwarebytes.org for priority support.

  2. Greetings,

    If you signed up and were on the mailing list for the public beta, the clean instructions were included as part of the instructions.

    We also have them pinned here as part of the Fixes for Common Issues, Questions, and Their Solutions FAQ. See Section A - Issue #7.

    The "SHGetValue error code0" error you are getting is because the MBAM-CLEAN program can't find something it is looking for, most likely a missing file due to a partial manual deletion. I would recommend you re-install the main program without updates or scans and then retry the clean process. The clean process will also clean entries from the Windows registry.

    Remember to perform the installation and clean removal from an an admin account and not a limited user account.

  3. Hi centralkong,

    What Swandog is saying is that your first screen shot is not a bug or error. It is telling you that the task already exists so the program knows not to add it again. There is no need for identical tasks that I can think of.

    As for the second screen shot. I myself am not sure what you are trying to report. Are you commenting on the memory or CPU usage? Neither seem out of the ordinary to me during an update. Does is settle back down afterward? Mine peaks toward the end of the update but when it completes it immediately settles back to approximately where it was before the update.

  4. @paulhafer

    Well...

    I was just about to suggest ESET Smart Security 4 or ESET NOD32 as likely being a compatible paid solution when xxEIEIOxx posted about his trouble. I did some limited testing for two or three days, a week or so ago, on XP SP3, between ESET Smart Security 4 and MBAM 1.44. I tried it without any exclusions and didn't appear to have any trouble except one time. I'm still not sure what caused it and hesitate to blame it on the two. The problem occurred while I was doing some other testing at the end of this one so they may not be related. I never had any boot up problems. One of the things that impressed me about ESET SS4 was how extremely configurable it is. That can be good if you like to tweak things, but can also backfire and be trouble, or at the least, an annoyance for some people. I would venture to say it is the most configurable AV I've seen targeted at home users. As you know from my previous posting, I haven't seen them all though. I hope to be able to do a retest in the not too distant future.

    I have also used the free version of Avira AntiVir on numerous home machines running XP and Vista, both x86 and x64 for a year and a half without needing any exclusions for MBAM. I've read that exclusions are required for Avira's paid-for premium version. This is likely to be the case for most AV's. As Daledoc1 pointed out, AV's and layered security have become a little complex and generally need some tuneup and attention to detail in order to avoid problems.

    We also normally recommend

    • Kaspersky - Paid but with 30 day trial - will need some tweaking. For detection rates, general consensus seems to favor this one.
    • MSE - Free for home use - will need some tweaking
    • Avast - Users are experiencing difficulties right now with the latest version. Hopefully, this will be sorted out soon. There is another thread about it here in the General Forum.

    If you're willing to spend some time, I'm sure we can come up with a solution that works for you. As I recall, when Daledoc1 first came on the board he didn't appear to be too keen on the idea of all the tweaking that may be necessary and didn't seem to really be sold on the idea that MBAM real time protection was all that. It looks to me like we made a believer out of him after all. Some folks come on the board for one problem and then we never see them again. He's still here though and contributing. :)

    @daledoc1 - It sounds like you understood me completely. I do have some other write ups in mind because of the support testing I do. I just need to get the time. I'm also waiting for some board updates to help accommodate the write ups.

    @xxEIOEIOxx - Please start a new topic for this in this forum and you can reference a link to this one. Only reason I say that is to help keep things neat and orderly. Once in a while some of these topics get overrun with too many users with similar symptoms that may or may not be related and it becomes really hard to follow along. Sometimes people do get lost in the shuffle because of it. Granted, just looking at the title, this was the perfect place to post it. Thanks for taking the time to look around a little first - a lot of people don't. We really do appreciate it.

    Before you do that though, please take a look at the FAQ and perform the clean removal process as outlined in Section A: Solution 7. Not that you have a license issue; sometimes this just solves some other unexplained problems and it's easy and fairly quick. Make sure to install as an administrator and to disable ESET during the installation.

    Meanwhile, if you do still have problems, you don't need to uninstall MBAM again. Reboot in safe mode as you did before, then go to the Protection tab and un-tick the check box to start with Windows and boot normally. Wait a few minutes till everything settles down, then try to enable the protection module from the Protection tab and see if you still have problems. This will help see if it's just a boot/timing problem or not.

    After all this, if something is still not right, please start the new topic stating what you've done and the results.

    Thanks,

  5. @ paulhafer

    We don't currently have a write up for setting exclusions in Webroot but you should still be able to adapt your situation.

    I'm not personally familiar with Webroot these days as I haven't used it since my last company, but look to see if there is an advanced setting you can use instead of the default. There may not be one. Not all A-V apps have them. If there is one, switch to that view.

    Whether there is an advanced view or not, look for places you can put exclusions in beyond just an on-access/resident shield type setting. Particularly look for HIPS (Host Intrusion Prevention - sometimes Protection) or PUP's (Potentially Unwanted Programs) settings. HIPS and PUP's are generic names and various security vendors call them different things for marketing purposes. Also be looking for a place to allow MBAM through the firewall if one is included.

    If you can exclude the entire directory for MBAM at C:\Program Files\Malwarebytes' Anti-Malware\ then do so. Otherwise, list the files individually as outlined above by Sartori. Check to see if you can do this on multiple-tabs on any sub-dialog boxes.

    My experience in getting MBAM to run along side another AV program is that the user doesn't explore the AV settings enough. They typically stop after the first place they see to put the exclusions and then MBAM still won't work.

    DaleDoc1 seems to think you need to also delay the start of MBAM's protection module. We do need to do that with some AV's, on some platforms, but not often. Those cases typically tend to be older XP machines. So far, I only know of one enterprise AV that requires this in Vista. If need be, we can accomplish that either internally with a registry switch or you can use a third party tool to delay protection start up.

  6. Greetings mfkrmfkr,

    The manual addition feature you are asking about has been submitted to the developers. I don't know when it may be implemented.

    The reason you don't see this show up in a scan is because the keylogger is not active at that time. Our program is not intended to act like a traditional Anti-Virus scanner and will often not detect inactive files. In addition to scanning, MBAM also has the protection module that constantly monitors memory looking for processes to start. When you try to run the keylogger program, the protection module kicks off though because that keylogger is now going to load. When you recieve notice of this, one of the choices is to ignore. Clicking on the ignore button should automatically add it to the ignore list. If there are additional files involved in making that program run, the protection module may kick off several more times and you will need to ignore each of those files as well. This should be a one time process only and from then on, you should not see any further blocking by MBAM for that program.

    If you have already added one or more of the keylogger files to the quarantine, you will need to de-select them from the quarantine list by highlighting them in turn and clicking the restore button.

  7. Hi tsedwards,

    I have to agree with noknojon,

    Send it back. Even if you get this figured it out, the next time there is any type of problem, you'll likely have a nagging suspicion that somehow, maybe you really didn't get it resolved after all and it's related to or exacerbated by this one in some unknown fashion. You should have peace of mind from the beginning.

  8. Hello kevint, and welcome to Malwarebytes.org

    We don't work on malware removal in the general forums.

    Please print out, read and follow the directions here, skipping any steps you are unable to complete. Then post a NEW topic here.

    One of the expert helpers there will give you one-on-one assistance when one becomes available.

    After posting your new post make sure under options that you select Track this topic and choose one of the Email options so that you're alerted when someone has replied to your post.

    Alternatively, as a customer of the paid for product, you can contact the helpdesk at support@malwarebytes.org for priority support.

  9. Hello hikari, and welcome to Malwarebytes.org

    In general you'll want to look for the pinned topics at the top of each of the forum areas for FAQ's regarding those areas.

    We don't work on malware removal in the general forums.

    Please print out, read and follow the directions here, skipping any steps you are unable to complete. Then post a NEW topic here.

    One of the expert helpers there will give you one-on-one assistance when one becomes available.

    After posting your new post make sure under options that you select Track this topic and choose one of the Email options so that you're alerted when someone has replied to your post.

    Alternatively, as a customer of the paid for product, you can contact the helpdesk at support@malwarebytes.org for priority support.

  10. @Skee Stylus

    The reason the mbam-clean program failed is most likely due to it not finding something it was looking for.

    Temporarily disable Spybot and especially TeaTimer as it will interfere with the whole process.

    See this link for a video tutorial on how to disable Spybot's resident protection and TeaTimer

    http://www.safer-networking.org/en/howto/disable.hs.html

    Reboot your machine for the changes to take effect

    Now re-install MBAM over the top of the existing installation and start the mbam-clean process again as outlined above, including temporarily disabling any other security software you have installed.

    If you still can't get MBAM to install and run correctly, you are most likely infected, in which case you should follow the directions below

    We don't work on malware removal in the general forums.

    Please print out, read and follow the directions here, skipping any steps you are unable to complete. Then post a NEW topic here.

    One of the expert helpers there will give you one-on-one assistance when one becomes available.

    After posting your new post make sure under options that you select Track this topic and choose one of the Email options so that you're alerted when someone has replied to your post.

    Alternatively, as a customer of the paid for product, you can contact the helpdesk at support@malwarebytes.org for priority support.

  11. I used Avira several months ago, and I don't recall having the option to select a level of heuristic sensitivity, so maybe it was an old version? I guess I was partly influenced by what was posted about it on AV-comparatives in re FPs. Also, a visit to a colleague's website got Avira all excited about the doom that would befall me on that site, i.e., trojan. I think it was a false positive, but I was afraid to visit her site anymore. I asked her about it in a nice way (privately, not publicly), but she stopped talking to me. :lol:

    I think I have to try Avira again, though. It sounds like a revamped engine. It was the most effortless AV I've ever used and did not drain system resources. Avast 5 may be good later on, but right now it is causing regular system freezes. I don't know if incompatibility with MBAM is causing it, though. I disabled MBAM live protection when I installed Avast 5, and it froze up. I uninstalled and reinstalled. Same deal. If it doesn't play nice with MBAM, I think another AV is best.

    Hi Beatrix,

    If you want to adjust the heuristics level in Avira, you need to select expert mode from the configuration dialog. Otherwise you won't see an option to adjust it. My experience over the course of about a year and a half with a setting of medium for the heuristics is that it often finds false positives in commercial non-pirated game files. I have not investigated, but suspect that it is due to packers used to compile the programs. Other than games, I have seen very few FP's. Occasionally it will flag some type of specialized security tool used in the removal of malware, but that's very common with every A-V I've ever used doing the same thing. Normally, most people would not likely have those files on their system anyway.

    This is not very apparent, but if you get a pop up notification that a file is infected and you tell it to ignore and remember behavior, it only ignores that file until you reboot. To ignore it permanently, you actually need to add it as an exclusion, which is another process entirely.

    All in all, I love Avira. I know - we all have our own favorites and I'm not about to belittle anyone else's. :)

  12. Hi daledoc1,

    My experience with the newer Comodo with all it's bells and whistles is that once it's in training mode, you probably won't have any further problems for the time being. I would expect the same of WISE. If something does come up in the future, you have a good idea of where to start looking though.

    It's entirely possible that you don't need to worry about the .dll files anyway. Some security programs don't seem to be bothered by them, while others do. If you really want to try to exclude them anyway, what you could try doing is entering a *.* in the file name area of the selection dialogue. Sometimes that will change the default filter of the files you see from just executables to all files. That often works, but not always.

Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.